Note: The job is a remote job and is open to candidates in USA. RED Global is seeking an Application Security Engineer for a six-month remote contract with a global client. The role leads threat and vulnerability management for AI workloads, embedding secure-by-design practices, security controls, and governance across AI and agentic application development lifecycles.
Responsibilities
- Integrate and optimize SAST, DAST, SCA, and other application security tooling within AI and agentic CI/CD pipelines
- Develop and maintain secure SDLC controls for AI application development
- Establish security guardrails and best practices for developers, makers, and AI engineering teams
- Collaborate with platform and engineering teams to embed security requirements into AI development workflows
- Lead threat modeling exercises for AI applications, agents, and LLM-powered systems
- Assess risks associated with OWASP LLM Top 10, OWASP Agentic AI Top 10, and other emerging AI security frameworks
- Identify and mitigate AI-specific attack vectors
- Define and enforce vulnerability management standards and SLAs across AI workloads
- Conduct vulnerability assessments and coordinate remediation efforts with development teams
- Track, prioritize, and report application security risks w/ risk-based methodologies
- Monitor security posture and provide recommendations for continuous improvement
- Build and manage Software Bill of Materials (SBOM) capabilities for AI, LLM, and traditional software assets
- Evaluate risks associated with open-source models, libraries, plugins/third-party AI services
- Ensure governance and compliance of AI dependencies throughout the software lifecycle
- Develop security standards, policies, and guidance for AI application development
- Provide training and consultation to development teams on secure AI coding practices
- Participate in architecture reviews and security assessments for AI initiatives
- Support audits, compliance assessments, and security reviews related to AI systems
Skills
- USC ONLY
- 5+ years of experience in Application Security, DevSecOps, Product Security, or Vulnerability Management
- Experience implementing and managing:
- SAST and DAST
- Software Composition Analysis (SCA)
- CI/CD security controls
- Hands-on experience integrating security solutions into modern software delivery pipelines
- Experience conducting threat modeling and security architecture reviews
- Deep understanding of secure application development methodologies
- Knowledge of AI/LLM attack surfaces and emerging AI security risks
- Familiarity with OWASP Top 10, OWASP API Security Top 10, OWASP LLM Top 10, and OWASP Agentic AI guidance
- Experience with container, cloud, and API security
- Knowledge of Software Bill of Materials frameworks/supply chain security practices
- Understanding of DevOps, CI/CD, and cloud-native architectures
Benefits
- 6 month REMOTE contract
Company Overview